General

  • Target

    679bea720c37e8c7fc28709f6ee60f71289200e31fe5c7723592a0c7ec0738a2

  • Size

    184KB

  • Sample

    241006-15xxyayeqm

  • MD5

    e290097a0ac0cd912c64157fb1de85b4

  • SHA1

    d0e302ec3e6b70e042450444185a2b10c4012ffb

  • SHA256

    679bea720c37e8c7fc28709f6ee60f71289200e31fe5c7723592a0c7ec0738a2

  • SHA512

    6d7f7c3a89a4fb8f060d56731fd75b895023c9b25cf9952e23eb68c451b835caa689cfe916c7e2396f4305e62e0bbe16a77d46c5df06201c98fb20b2133e37c5

  • SSDEEP

    3072:CJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jda//2uFrSc:jfYOX+wTScR/Xzku9LVw6uG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      679bea720c37e8c7fc28709f6ee60f71289200e31fe5c7723592a0c7ec0738a2

    • Size

      184KB

    • MD5

      e290097a0ac0cd912c64157fb1de85b4

    • SHA1

      d0e302ec3e6b70e042450444185a2b10c4012ffb

    • SHA256

      679bea720c37e8c7fc28709f6ee60f71289200e31fe5c7723592a0c7ec0738a2

    • SHA512

      6d7f7c3a89a4fb8f060d56731fd75b895023c9b25cf9952e23eb68c451b835caa689cfe916c7e2396f4305e62e0bbe16a77d46c5df06201c98fb20b2133e37c5

    • SSDEEP

      3072:CJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jda//2uFrSc:jfYOX+wTScR/Xzku9LVw6uG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks